Skip to content
  1. Oct 18, 2018
  2. Oct 17, 2018
  3. Oct 16, 2018
    • Matthew Whitehead's avatar
      x509asn1: Fix SAN IP address verification · df54b14f
      Matthew Whitehead authored
      For IP addresses in the subject alternative name field, the length
      of the IP address (and hence the number of bytes to perform a
      memcmp on) is incorrectly calculated to be zero. The code previously
      subtracted q from name.end. where in a successful case q = name.end
      and therefore addrlen equalled 0. The change modifies the code to
      subtract name.beg from name.end to calculate the length correctly.
      
      The issue only affects libcurl with GSKit SSL, not other SSL backends.
      The issue is not a security issue as IP verification would always fail.
      
      Fixes #3102
      Closes #3141
      df54b14f
  4. Oct 15, 2018
  5. Oct 14, 2018
  6. Oct 13, 2018
  7. Oct 12, 2018
  8. Oct 11, 2018
  9. Oct 10, 2018
  10. Oct 09, 2018
  11. Oct 08, 2018
  12. Oct 07, 2018
  13. Oct 06, 2018